CVE-2025-38576: powerpc/eeh: Make EEH driver device hotplug safe
In the Linux kernel, the following vulnerability has been resolved:
powerpc/eeh: Make EEH driver device hotplug safe
Multiple race conditions existed between the PCIe hotplug driver and the EEH driver, leading to a variety of kernel oopses of the same general nature:
<pcie device unplug> <eeh driver trigger> <hotplug removal trigger> <pcie tree reconfiguration> <eeh recovery next step> <oops in EEH driver bus iteration loop>
A second class of oops is also seen when the underlying bus disappears during device recovery.
Refactor the EEH module to be PCI rescan and remove safe. Also clean up a few minor formatting / readability issues.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38576?
CVE-2025-38576 is classified as a high severity vulnerability due to multiple race conditions in the Linux kernel.
How do I fix CVE-2025-38576?
To fix CVE-2025-38576, update your Linux kernel to the latest patched version provided by your distribution.
What are the potential effects of CVE-2025-38576?
CVE-2025-38576 could lead to kernel oopses and instability when using the PCIe hotplug functionality.
Which versions of the Linux kernel are affected by CVE-2025-38576?
CVE-2025-38576 affects various versions of the Linux kernel that incorporate the affected drivers, particularly those with EEH and PCIe functionalities.
Is there a workaround for CVE-2025-38576?
Currently, the best approach for CVE-2025-38576 is to apply the security patches as there are no known workarounds that fully mitigate the risk.